F5 BIG-IP crossite scripting

Crossite scripting in web admin console...

barracude-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 || ISR || || Infobyte Security Research || www.infobyte.com.ar || 09.21.2007 || .:: SUMMARY Barracuda Spam Firewall Cross-Site Scripting Version: Barracuda Spam Firewall firmware v3.4.10.102 It is suspected that all previous versions of Barracuda Sp...

Code injection

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

CVE-2007-4511

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

CVE-2007-4511

The CVE-2007-4511 issue affects Sun Admin Console in Sun Application Server 9.0_0.1. The root problem is that configuration changes are not persisted, causing the SSL and SSL_MutualAuth ORB listener services to enable all protocols and ciphers after a restart. This can allow remote attackers to b...

CVE-2007-4511: Undefined Security Weakness

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

Sql injection

SQL injection vulnerability in adminconsole/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters...

CVE-2007-4207

SQL injection vulnerability in adminconsole/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters...

CVE-2007-4207

SQL injection vulnerability in adminconsole/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters...

CVE-2007-4017

Cross-site request forgery CSRF vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators...

KF Web Server 3.1.0 admin console XSS

KF Web Server 3.1.0 admin console XSS -------------------------------------- site:http://www.keyfocus.net/kfws/ parameter:opsubmenu poc --- http://127.0.0.1:9727/index.wkf?opmenu=0&opsubmenu=aaaa223E3Cscript 3Ealert'xss';3C/script3E bug found by: Shay Priel aka Prili - [email protected]...

Design/Logic Flaw

The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...

CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...

CVE-2007-2975

CVE-2007-2975 affects Ignite Realtime Openfire 3.3.0 and earlier (Wildfire). The root cause is an improper filter mapping specification in web.xml for the admin console, allowing remote attackers to gain privileges and execute arbitrary code via functionality exposed through DWR (demonstrated usi...

CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...

Openfire < 3.3.1 Admin Console Privilege Escalation

Binary data 4070.prm...

Openfire Admin Console Remote Privilege Escalation

The remote host is running Openfire / Wildfire, an instant messaging server supporting the XMPP protocol. The version of Openfire or Wildfire installed on the remote host allows unauthenticated access to a servlet, which could allow a malicious user to upload code to Openfire via its admin consol...

CVE-2007-2698

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information...

[SA23627] FirePass Multiple Vulnerabilities

TITLE: FirePass Multiple Vulnerabilities SECUNIA ADVISORY ID: SA23627 VERIFY ADVISORY: http://secunia.com/advisories/23627/ CRITICAL: Less critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information WHERE: From remote OPERATING SYSTEM: FirePass 6.x...

CVE-2006-7233

Cross-site scripting XSS vulnerability in the login form login.jsp of the admin console in Openfire formerly Wildfire 2.6.0, and possibly other versions before 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the url parameter...